Page History

...

• definition of identity disclosure
• quasi-identifiers
• attack in two directions - population to sample, sample to population
• risk measure by group size (of 1 = unique)
• generalize - group size gets bigger - risk reduces - maximum (k-anonymity)(public), average (non-public), unicity
• risk denominator is not group size in sample but in population
• risk threshold in identifiability spectrum
• privacy-utility tradeoff
• data transformations - generalization, suppression, addition of noise, microaggregation
• for non-public data, can add controls (privacy, security, contractual)
• motivated intruder attack

Two publicly available tools:

...